No Crop Video Editor Instagram - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application No Crop Video Editor Instagram published at the 'play' market has multiple vulnerabilities...

Photo Saver For Instagram - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Photo Saver For Instagram published at the 'play' market has multiple vulnerabilities...

No Crop & Square for Instagram - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application No Crop & Square for Instagram published at the 'play' market has multiple vulnerabilities...

Video Collage for Instagram - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Video Collage for Instagram published at the 'play' market has multiple vulnerabilities...

Quotes for Instagram - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Quotes for Instagram published at the 'play' market has multiple vulnerabilities...

Facebook Fixes Instagram Vulnerability That Opened 1M Accounts to Compromise

Facebook was quick to fix an issue earlier this month that could’ve let an attacker break into four percent of all active, locked Instagram accounts, meaning it affected approximately one million users. Belgium-based IT security consultant Arne Swinnen discovered the issue two weeks ago when he...

Who Viewed Your Profile on Instagram? Obviously, Hackers!

Are you curious about who viewed your profile on Instagram? This is probably the most frequently asked question nowadays, and there are several applications available on Google Play Store and Apple App Store, which claims to offer you the opportunity to see who is looking at your Instagram profil...

Instagram Adds Two-Step Verification to Prevent Account from being Hacked

Hijacking an online account is not a complicated procedure, not at least in 2016. Today, Instagram confirmed that the company is in the process to roll out two-factor authentication for its 400 Million users. It is impossible to make your online accounts hack-proof, but you can make them less...

WordPress Instagram 1.1.0 Cross Site Scripting

Exploit Title : WordPress Instagram Plugin 1.1.0 Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : https://wordpress.org/ Software Link : https://wordpress.org/plugins/instalinker/ Date: 2016/02/04 Version : 1.1.0 Vulnerable code : File Name: instalinker-admin-preview.php...

Security researchers have found that Instagram vulnerability by the FaceBook executives, the threat-vulnerability warning-the black bar safety net

! An independent security researcher claimed that he had discovered Instagram in a series of security vulnerabilities and configuration flaws, by using these loopholes, he managed to get access stored on the Instagram servers sensitive data on the permissions; in him, to the relevant vendor...

Shocking! Instagram HACKED! Researcher hacked into Instagram Server and Admin Panel

Ever wonder how to hack Instagram or how to hack a facebook account? Well, someone just did it! But, remember, even responsibly reporting a security vulnerability could end up in taking legal actions against you. An independent security researcher claims he was threatened by Facebook after he...

Facebook, Researcher Spar Over Instagram Vulnerabilities

A security researcher is in a bit of a scrum with Facebook over vulnerability disclosures that not only tested the boundaries of the social network’s bug bounty program, but he said, also prompted hints of legal and criminal action. Wesley Wineberg, a contract employee of security company Synack,...

jalopnik.com XSS vulnerability

Vulnerable URL: http://jalopnik.com/ajax/inset/iframe?id=instagram-80uTYMJ58"=1 Details: Description| Value ---|--- Patched:| Yes, at 07.11.2015 Latest check for patch:| 07.11.2015 21:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1515 Google Pagerank| 0 VIP...

Geotweet - Social engineering tool for human hacking

Another way to use Twitter and instagram. Geotweet is an osint application that allows you to track tweets and instagram and trace geographical locations and then export to google maps. Allows you to search on tags, world zones and user info and timeline. Requirements Python 2.7 PyQt4, tweepy,...

Alpine PhotoTile for Instagram <= 1.2.7.5 - Authenticated Cross-Site Scripting (XSS)

The alpine-photo-tile-for-instagram WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

CVE-2015-6523

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

CVE-2015-6523: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the authentication of administrators for requests that have unspecified impact via a request to the instagram-portfolio page in wp-admin/options-general.php...

PT-2015-7286

Name of the Vulnerable Software and Affected Versions Portfolio plugin for WordPress versions prior to 1.05 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests with unspecified impact. This is achieved via a reque...

oninstagram.com XSS vulnerability

Vulnerable URL: http://www.oninstagram.com/profile/search?query=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

WordPress Portfolio 1.0 Cross Site Request Forgery

Title: Cross-Site Request Forgery Vulnerability in Portfolio Plugin Wordpress Plugin v1.0 Submitter: Nitin Venkatesh Product: Portfolio Plugin Wordpress Plugin Product URL: https://wordpress.org/plugins/portfolio-by-lisa-westlund/ Vulnerability Type: Cross-site Request Forgery CWE-352 Affected...